CVE-2023-37521: HCL BigFix OSD Bare Metal Server WebUI is affected by sensitive information disclosure
Published Jan 16, 2024
·Updated
HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower can sometimes include sensitive information in a query string which could allow an attacker to execute a malicious attack.
Affected Software
1 affected component
Hcltechsw Bigfix Bare Osd Metal Server Webui<311.28
Event History
Jan 16, 2024
CVE Published
via MITRE·03:55 PM
Data Sourced
via MITRE·03:55 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-37521?
CVE-2023-37521 is classified as a medium severity vulnerability.
2
How do I fix CVE-2023-37521?
To fix CVE-2023-37521, upgrade HCL BigFix Bare OSD Metal Server WebUI to version 311.28 or higher.
3
What kind of attack is possible with CVE-2023-37521?
CVE-2023-37521 could allow an attacker to execute malicious attacks by exploiting sensitive information in the query string.
4
Which versions of HCL BigFix Bare OSD Metal Server WebUI are affected by CVE-2023-37521?
HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower is affected by CVE-2023-37521.
5
Is CVE-2023-37521 related to web application security?
Yes, CVE-2023-37521 is a web application vulnerability that can expose sensitive information.